Skip to content
OpenAdvisories

Product · webstudio-is

webstudio

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-86119

    Webstudio through 0.296.0 SSRF via /cgi proxy routes

    Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints…

    webstudio-is webstudio